Policy Server Guides › Policy Server Configuration Guide › Administrative User Interface Management › SiteMinder Administrators › How to Create an Administrator › Administrator Use Case › Manager Admin Creates Junior Admin

Manager Admin Creates Junior Admin

The second part of this use case shows how privileges can be assigned from an administrator with a specific set of privileges to another administrator.

Manager Admin creates a manager named Junior Admin. When Manager Admin goes to select the Security Categories for Junior Admin, only the following two are available:

• Application Administration
• Policy Administration

Manager Admin can only assign those two categories to Junior Admin because Manager Admin only has the P (propagate) permission for those two categories.

Important! The propagate permission lets one administrator assign the category to another administrator.

Manager Admin proceeds to assign access methods and rights to Junior Admin as follows:

• Access Method

  GUI Allowed

• Rights
  • Manager Admin selects the Application Administration category. Manager Admin has ALL for the Application Administration scope, so when Manager Admin selects this category for Junior Admin, Manager Admin sees a list of all the applications available in the system. In this case, Manager Admin assigns ALL as the scope for Junior Admin, but with only the permission to view the applications.
  • Manager Admin selects the Policy Administration category. Manager Admin only has a choice of Domain1 and Domain2 in the scope dialog. Manager Admin selects Domain1 for Junior Admin and gives Junior Admin only view and manage permissions.

    Note: When choosing categories, Manager Admin only had the Policy Administration category available because Manager Admin previously assigned the Application Administration category, which is the only other available choice.

    If Manager Admin wants to assign Domain2 later on, Domain2 is the only domain available in the scope list because Domain1 is already assigned.

The final permissions for Junior Admin are as follows:

* Permissions: View, Manage, Propagate, eXecute (only for executing reports)